This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json) Hash identifier: VtDvwGt+gAbrhjpuHGGB5WrTmJ+Pji6UrR/KK0eYlns= Subject key identifier: 83:DD:D1:52:A8:F8:2B:BE:56:96:BA:82:00:DF:61:7C:10:D7:86:6C Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75 Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175 Certificate serial: 019B2FD5449546E76D0D0B0013AE2B4B3581 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 05:01:04 +0000 Manifest this update: Thu 18 Dec 2025 05:01:04 +0000 Manifest next update: Fri 19 Dec 2025 05:01:04 +0000 Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: tHVRU3BG4xbPm9hBtDx3D2dA2WGgqSU+puifgKD8mvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:44:95:46:e7:6d:0d:0b:00:13:ae:2b:4b:35:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175 Validity Not Before: Dec 18 05:01:04 2025 GMT Not After : Dec 19 05:01:04 2025 GMT Subject: CN=83ddd152a8f82bbe5696ba8200df617c10d7866c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:57:59:64:40:3d:b4:c3:4e:1f:1d:5f:17: 78:cc:cd:5b:86:2a:d1:d2:e6:c3:7d:4a:c0:14:3d: d1:95:a9:49:b1:80:e8:f3:b0:f4:d1:d2:9d:2c:08: 57:23:b4:2c:b9:79:96:3a:19:e8:f1:9e:94:0a:89: 3f:68:07:a2:c0:fd:43:b2:4a:84:cc:b4:24:7f:5d: 80:cc:8e:c6:d2:59:03:b7:89:b3:36:53:52:20:66: cc:0d:5c:73:37:26:f9:77:9e:71:d4:f6:33:1e:54: b3:49:b2:81:ee:e9:e6:94:42:5b:a4:7c:f1:d8:43: 26:4d:e0:26:cd:63:ce:df:0f:38:c1:0f:70:0f:fc: b5:4c:2d:6f:7a:26:e9:26:aa:47:ef:29:22:43:9e: c1:99:00:1e:e2:ab:79:83:b9:b2:6e:43:eb:fe:29: e6:34:f5:57:17:42:dc:86:5d:4d:38:50:ef:94:43: 7b:e7:59:62:82:7d:d7:b2:3c:6f:f4:03:bd:be:3c: cb:2e:5a:e8:10:1b:10:2e:6b:8d:dc:b4:37:98:81: 82:22:73:29:53:ab:84:62:44:da:72:0e:b9:02:38: e6:07:5f:aa:eb:ef:b7:37:4f:da:03:66:d7:7e:9a: 34:07:f3:8c:3f:a4:7d:93:c6:32:94:23:f5:f3:e5: eb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DD:D1:52:A8:F8:2B:BE:56:96:BA:82:00:DF:61:7C:10:D7:86:6C X509v3 Authority Key Identifier: keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5d:b4:c9:66:7e:76:16:0d:d0:54:c0:1e:7e:5e:2a:f1:9c: 93:79:cc:47:3b:d4:e5:3f:7e:3b:72:4f:eb:a1:b1:5a:3a:a6: 0b:b5:c9:51:a1:4c:dd:98:d6:9b:26:25:de:2e:51:f6:a5:a7: 52:9e:a2:13:45:22:b7:7f:fd:4b:10:79:ec:2e:5c:3a:0d:a5: 26:e7:23:b0:b1:ee:1e:4a:c5:88:a2:56:41:98:8d:df:35:56: 95:e4:77:91:47:91:9f:9a:c1:b0:ec:6e:b8:ee:17:7a:e5:0c: 4e:2f:e7:6e:34:6f:37:09:ff:8c:4a:68:50:c0:49:f0:af:22: 90:28:40:35:c9:d0:ec:b3:81:db:77:3f:1c:12:6c:8c:ed:0c: d0:38:df:29:4e:97:fe:e2:95:5a:26:b1:80:62:95:d0:a7:9b: ae:bc:0d:e4:9b:ea:06:c1:b5:62:37:fd:65:79:4d:ac:d7:2a: f8:1e:ad:d3:f5:e7:10:e7:3d:ee:22:16:45:06:ad:eb:ea:9c: d8:a6:ec:a0:40:77:fd:24:5a:25:60:ca:0d:c3:05:62:6e:f6: 7f:eb:52:b9:fe:fb:53:1e:48:9a:97:08:6f:f1:21:9b:e7:18: 32:54:4f:ef:86:06:9c:fb:ed:78:2d:a2:f7:b9:13:ef:4b:2f: 37:4c:88:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1USVRudtDQsAE64rSzWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjI2NTRlNDMyYjc0ZGM4ZGE2NmQ4MTZiMjYwY2ZmYzgx NzMxNzUwHhcNMjUxMjE4MDUwMTA0WhcNMjUxMjE5MDUwMTA0WjAzMTEwLwYDVQQD Eyg4M2RkZDE1MmE4ZjgyYmJlNTY5NmJhODIwMGRmNjE3YzEwZDc4NjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkNXWWRAPbTDTh8dXxd4zM1bhirR 0ubDfUrAFD3RlalJsYDo87D00dKdLAhXI7QsuXmWOhno8Z6UCok/aAeiwP1DskqE zLQkf12AzI7G0lkDt4mzNlNSIGbMDVxzNyb5d55x1PYzHlSzSbKB7unmlEJbpHzx 2EMmTeAmzWPO3w84wQ9wD/y1TC1veibpJqpH7ykiQ57BmQAe4qt5g7mybkPr/inm NPVXF0Lchl1NOFDvlEN751lign3Xsjxv9AO9vjzLLlroEBsQLmuN3LQ3mIGCInMp U6uEYkTacg65AjjmB1+q6++3N0/aA2bXfpo0B/OMP6R9k8YylCP18+XrawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPd0VKo+Cu+Vpa6ggDfYXwQ14ZsMB8GA1UdIwQY MBaAFKWyZU5DK3TcjaZtgWsmDP/IFzF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iNjk4MTEtY2YzZi00OWJjLTgyYWUt ZTU1ZjlmOTE2OWRiLzEvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iNjk4MTEtY2YzZi00OWJjLTgyYWUtZTU1ZjlmOTE2OWRi LzEvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ120yWZ+ dhYN0FTAHn5eKvGck3nMRzvU5T9+O3JP66GxWjqmC7XJUaFM3ZjWmyYl3i5R9qWn Up6iE0Uit3/9SxB57C5cOg2lJucjsLHuHkrFiKJWQZiN3zVWleR3kUeRn5rBsOxu uO4XeuUMTi/nbjRvNwn/jEpoUMBJ8K8ikChANcnQ7LOB23c/HBJsjO0M0DjfKU6X /uKVWiaxgGKV0KebrrwN5JvqBsG1Yjf9ZXlNrNcq+B6t0/XnEOc97iIWRQat6+qc 2KbsoEB3/SRaJWDKDcMFYm72f+tSuf77Ux5ImpcIb/Ehm+cYMlRP74YGnPvteC2i 97kT70svN0yIQg== -----END CERTIFICATE-----Generated at Thu Dec 18 10:26:41 2025 by rpki-client